VYPR
← All advisories
High severity8.0NVD Advisory· Published May 18, 2022· Updated Jun 17, 2026

CVE-2021-42852

CVE-2021-42852

Description

A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system commands by sending a crafted packet to the device.

Affected products

11
  • Lenovo/A1 Firmware
    cpe:2.3:o:lenovo:a1_firmware:*:*:*:*:*:*:*:*
    Range: <5.3.6.a1
  • Lenovo/T1 Firmware
    cpe:2.3:o:lenovo:t1_firmware:*:*:*:*:*:*:*:*
    Range: <5.3.6.t1
  • Lenovo/T2 Firmware
    cpe:2.3:o:lenovo:t2_firmware:*:*:*:*:*:*:*:*
    Range: <5.3.8.t2
  • Lenovo/T2pro Firmware
    cpe:2.3:o:lenovo:t2pro_firmware:*:*:*:*:*:*:*:*
    Range: <5.3.7.t2-pro
  • Lenovo/X1 Firmware
    cpe:2.3:o:lenovo:x1_firmware:*:*:*:*:*:*:*:*
    Range: <5.3.8.x1
  • Lenovo/Personal Cloud Storagellm-fuzzy6 versions
    (expand)+ 5 more
    • (no CPE)
    • (no CPE)range: unspecified
    • (no CPE)range: unspecified
    • (no CPE)range: unspecified
    • (no CPE)range: unspecified
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.